Over 1 million tech questions and answers.

Spyware that does random redirects in Firefox Google Search

Q: Spyware that does random redirects in Firefox Google Search

A while ago I got the fake antivirus malware. I ran Malware Bytes that seemed to have solved the problem. Then after a while I started noticing random redirects after I search on Google. I've ran GMER and Hijack this and have attached the logs. I super appreciate it, thanks for your help in advance!GMER Scan Log:=====================GMER 1.0.15.15281 - http://www.gmer.netRootkit quick scan 2010-07-28 16:53:57Windows 6.1.7600 Running: 5m4tw2w6.exe; Driver: C:\Users\philyuen\AppData\Local\Temp\fxldipog.sys---- System - GMER 1.0.15 ----Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateProcessEx [0x90329B9C]Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwCreateSection [0x903299C0]Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ZwLoadDriver [0x90329AFA]Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) NtCreateSectionCode \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software) ObMakeTemporaryObject---- Devices - GMER 1.0.15 ----AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)AttachedDevice \Driver\tdx \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)AttachedDevice \Driver\tdx \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (Kernel Mode Driver Framework Runtime/Microsoft Corporation)---- EOF - GMER 1.0.15 ----

RELEVANCY SCORE 200
Preferred Solution: Spyware that does random redirects in Firefox Google Search

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Spyware that does random redirects in Firefox Google Search

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will appear Click OKDeFogger may ask you to reboot the machine, if it does - click OKDo not re-enable these drivers until otherwise instructed.Download DDS:Please download DDS by sUBs from one of the links below and save it to your desktop:Download DDS and save it to your desktopLink1Link2Link3Please disable any anti-malware program that will block scripts from running before running DDS.Double-Click on dds.scr and a command window will appear. This is normal.Shortly after two logs will appear: DDS.txt Attach.txtA window will open instructing you save & post the logsSave the logs to a convenient place such as your desktopCopy the contents of both logs & post in your next replyScan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth,. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Save Report.Save the report somewhere where you can find it. Click Close.Copy the entire contents of the report and paste it in a reply here.Note** you may get this warning it is ok, just ignore"Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?"MBRCheckPlease also download MBRCheck to your desktop Double click MBRCheck.exe to run (vista and Win 7 right click and select Run as Administrator)It will show a Black screen with some data on it a report called MBRcheck will be on your desktopopen this reportRight click on the screen and select > Select All Press Control+Cnow please copy that report to this threadinformation and logs:In your next post I need the following1.logs from DDS2.log from RKUnHooker3. report from MBRchecker4.let me know of any problems you may have hadGringo

Read other 22 answers
RELEVANCY SCORE 95.6

Hi,

I seem to have picked up a nasty trojan. I use Firefox 3.5 to browse (though the issue happens with IE too).. For the past several days, while clicking on a google search result (or links on other pages), I get a new firefox window opened with 3 tabs. The first 2 tabs are just urls with weird characters. The 3rd tab is usually pointing to a mozilla folder followed by funny characters: Message: Firefox can't find the file at /C:/Program Files/Mozilla Firefox/<funny characters>

I have VirusScan OnAccess enbled and it constantly seems to be cleaning a file iaStor.sys, which it detects as a trojan. But cannout seem to fix it. I ran MBA-M and it does not detect anything. VirusScan on-demand also detects nothing.

This is my work laptop and am afraid to lose anything. Please help !!

At wits end.
Saandy

A:Google search results and FireFox/IE random redirects

This is my work laptop and I am really worried. Can someone please respond and help ? Do I need to run HJT and post the logs first ?

Worried...
Saandy3

Read other 1 answers
RELEVANCY SCORE 93.6

http://www.bleepingcomputer.com/forums/topic459101.html
as an add-on, firefox in general runs sluggishly

I skipped step 8 in the preparation guide: http://www.bleepingcomputer.com/forums/topic34773.html since I have a 64 bit computer

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_29
Run by Rajiv Desikan at 23:53:58 on 2012-07-03
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.8106.5432 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Program... Read more

A:Firefox google redirects to webhp after a search/opens up random links

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

Read other 16 answers
RELEVANCY SCORE 93.6

Firstly, I think I probably got this from some shady porno sites while in private browsing, fwiw

basically, whenever I google stuff using firefox on my laptop (64 bit windows 7, dell xp), oftentimes, when I click on the links, it opens up some random spam website. It takes numerous clicks to actually get the actual link to open. Also, when this doesn't happen, clicking on any google searches redirects the browser to google.com/webhp. I have to exit this tab and open a new tab for google to work after this. Finally, firefox now uses up to 25% of my cpu performance when I check my task manager. So far, these problems only exist on firefox, and IE is fine, but I'd still like to get rid of this possible malware. Thanks!

A:Firefox google redirects to webhp after a search/opens up random links

Welcome aboard Download Security Check from HERE, and save it to your Desktop. * Double-click SecurityCheck.exe * Follow the onscreen instructions inside of the black box. * A Notepad document should open automatically called checkup.txt; please post the contents of that document.=============================================================================Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.Make sure the following options are checked:
Internet ServicesWindows FirewallSystem RestoreSecurity Center/Action CenterWindows UpdateWindows DefenderPress "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.====================================================================================Please download MiniToolBox and run it.Checkmark following boxes:Report IE Proxy SettingsReport FF Proxy SettingsList content of HostsList IP configurationList Winsock EntriesList last 10 Event Viewer logList Installed ProgramsList Devices (do NOT change any settings here)List Users, Partitions and Memory sizeClick Go and post the result.=============================================================================Download Malwarebytes' Anti-Malware (aka MBAM): http://www.malwarebytes.org/products/malwarebytes_free to your desktop. * Double-click mbam-setup.exe and follow the prompts to install the program. * At the end, be sure a checkmark is placed next t... Read more

Read other 6 answers
RELEVANCY SCORE 91.6

Ok so i've noticed that firefox randomly will open ad pages in new tabs and redirect my google searches.

I have run complete scans with superantisypware, avira, spybot, malwarebytes, iobit security 360 and inbuilt windows malware scanner. Some of which came up with detections which i got rid yet the problem remains. I tried to restore my comp but it failed, obviously one of the malwares clever tricks.

Here is my DDS log. The attach.txt file is attached but i could not get the GMER rootkit scanner to work. It would complete the scan but as soon as i tried to save it it would give a blue screen and restart...not good i would say. So hence i dont have an ark.txt.

Really starting to worry. I read that these things are usually to direct internet traffic to specific sites to increase ad revenue for the malware people. I havn't done any internet banking cos i am not that foolish but is there much of a chance they will get control of my gmail or facebook accounts? How paranoid should i be in terms of infections spreading to other networked computers and external hard drives?


DDS (Ver_09-12-01.01) - NTFSx86
Run by Darren at 16:35:42.58 on Wed 13/01/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Professional 6.1.7600.0.1252.61.1033.18.3323.2523 [GMT 10.5:30]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system... Read more

A:Due to adware/spyware/malware firefox opens random tabs and google redirects pages

BUMP, please

Read other 12 answers
RELEVANCY SCORE 78.8

When I try to search the internet using Google, regardless of the link I click on, I end up getting re-directed to a different site. I ran Avast, Malware Bytes and Spybot and all 3 applications did not find anything. I tried to re-install FireFox but that had no effect. I do not have IE installed on my system at this time. This issue is driving my crazy When I search using Yahoo, I can use the links but it takes for ever for the page to load or at times, I'll just get a timeout error.

DDS Log:
DDS (Ver_09-10-26.01) - NTFSx86
Run by Joey at 22:52:54.64 on Fri 01/01/2010
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1424 [GMT -6:00]

AV: avast! antivirus 4.8.1368 [VPS 100101-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACSer... Read more

A:Redirects during Google search via FireFox

It does look like IE 7.0.5730 is not effected in any way.

Read other 3 answers
RELEVANCY SCORE 78.8

When I try to search the internet using Google, regardless of the link I click on, I end up getting re-directed to a different site. I ran Avast, Malware Bytes and Spybot and all 3 applications did not find anything. I tried to re-install FireFox but that had no effect. I do not have IE installed on my system at this time. This issue is driving my crazy When I search using Yahoo, I can use the links but it takes for ever for the page to load or at times, I'll just get a timeout error.
Here are my log files:

DDS LOG FILE >>>>

DDS (Ver_09-10-26.01) - NTFSx86
Run by Joey at 21:11:29.35 on Fri 11/27/2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_17
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2038.1462 [GMT -6:00]

AV: avast! antivirus 4.8.1368 [VPS 091127-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\ArcSo... Read more

A:Redirects during Google search via FireFox

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 4 answers
RELEVANCY SCORE 78.8

EDIT: Forgot to add I am using Windows XP x86 with 512 MB Ram with Service Pack 3So yesterday I tried using Firefox I searched up facebook it showed the results. I clicked on facebook and it lead me to the main google website. When I tried to search there I get back into a loop. Though if I click some links of a domain ill get a google error that the site does not exist. I tried many other sites and some bookmarks and same thing happened. When I searched up firefox though it lead me to the original homepage but with broken links and images. Internet Explorer did not even open. My computer is slow regardless so now its really slow.I uninstalled firefox and reinstalled with an installer from this computer and the same problem continued.I ran malwarebytes, avira, and super anispyware but they found nothing.I uninstalled firefoxI downloaded from adaware and spybot search and destroy from this computer and transferred it to the old computer via flashdrive.Adaware found one thing and deleted it. I Spybot search and destroy wouldn't scan without removal of Adaware so uninstalled Adaware. Then updated the Spybot search and destroy and ran it. It found many things, Zangoo toolbar and adware were some. After I Immunized and then installed firefox again fresh installer. The problem still continued.I rebooted it twice and it shows that I didn't have a firewall but then it fixed itself and showed it did.The homepage is the default firefox one and it looks normal, I do a search a... Read more

A:Firefox redirects me to google after a search

Can I get help? The problem continues.

EDIT: Sorry for bumping the thread.

Read other 7 answers
RELEVANCY SCORE 78.8

OK...this all started yesterday when I added a Facebook friend that I didn't know...thought it might be a friend of the wifes. I clicked the profile after I added her and BOOM....this all started. Every time I do a Google search, it shows the results...but when I click on them they go to other sites.

Here are my log files.

DDS (Ver_09-12-01.01) - NTFSx86
Run by Kevin at 12:29:07.98 on Wed 12/16/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_14
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2495 [GMT -5:00]

AV: Norton 360 *On-access scanning disabled* (Updated) {A5F1BC7C-EA33-4247-961C-0217208396C4}
FW: Norton 360 *enabled* {371C0A40-5A0C-4AD2-A6E5-69C02037FBF3}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files... Read more

A:Firefox/IE Google search redirects

I did try to use Malwarebytes...CCleaner and SUPERantimalware...I ran those reports with those installed...I uninstalled everything I had installed and just re-ran the reports and reposted with new info....sorry for that I figured I better do the new reports after I did that so things won't get screwed up from the beginning.

Read other 15 answers
RELEVANCY SCORE 78.8

Hello, I originally used Google Chrome as my internet browser, but for some strange reason, it resulted in a DNS error, which caused me to be unable to access anything Google related with Google Chrome. I've already looked and searched for a solution, but I am unable to find one.

So I switched over to Firefox. However, when I use Google Searches on Firefox, the searches redirect me to random Ad sites.

I used to use Avira for my anti-virus, but I've recently switched to Microsoft Internet Security Essentials. Also, during that same day, I downloaded Avast and performed a scan with that, and it found that one of my system files was infected with a rookit. I've heard that removing such a file can cause a computer to not be able to boot up so I decided to leave that alone for a while. Then I performed scans with Microsoft Internet Security Essentails, Superanti-Spyware, and Malwarebytes, and they all resulted in nothing.

I am on a Dell Inspiron 1525 and I have Windows Vista Ultimate. And it is a 32-bit operating system.

Would you guys be able to help me with my problems?

A:Firefox Google Search Redirects

Hello and welcome. Please run these,post the logs and tell me how it is...Please download GooredFix from one of the locations below and save it to your DesktopDownload Mirror #1Download Mirror #2Ensure all Firefox windows are closed.To run the tool, double-click it (XP), or right-click and select Run As Administrator (Vista).When prompted to run the scan, click Yes.GooredFix will check for infections, and then a log will appear. Please post the contents of that log in your next reply (it can also be found on your desktop, called GooredFix.txt).Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.5.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure... Read more

Read other 7 answers
RELEVANCY SCORE 78.8

I've hit a bit of nasty what-I-believe-to-be Malware that redirects my Google searches. I will search for a given topic and Google will display results as normal, but sometimes when I click on one of the given links I am directed to an ad or fake search site rather than my search result. It doesn't always happen, oddly enough, but happens for both IE and Firefox. I am running Windows XP Service Pack 3.

I use Avast!, and ever since the problem has popped up it has been detecting viruses on a rather routine basis (when before, it would only detect one once an a while, maybe once or twice a week, now it'll detect three at a time at various points in the day).

I've dealt with some pretty bad viruses before, but I'm not sure how to go about remove this problem. I searched for an answer, but the ones that seemed to work for others have not worked for me: MalwareBytes Anti-Malware found some things, but removing them did nothing. GooredFix didn't find anything.

So here I am, coming to you for some answers. I ask thee: Can you help?

Read other answers
RELEVANCY SCORE 78.8

Every time I try to search with google . Whatever link I choose when I do click it , it takes me to a complete diffrent page than what I chose. I'm so frustrated my laptop is not even a month old yet
I've run Spysweeper, Spyware doctor, AVG Anti-spyware, and for the most part they didn't find much. I removed whatever they did find. But my computer is still having these symptons. I do not even know where to start.
I appreciate your
help!
 

Read other answers
RELEVANCY SCORE 78.8

Scanned with AVG yesterday & detected a Trojan, performed recommended action & appeared to fix redirects.  Today, still getting redirects but not with every search. 
Thanks in advance,

Read other answers
RELEVANCY SCORE 78.8

Hello BC Forums,

A few days ago, Google searches via Firefox were hijacked on my machine. This issue does not affect Chrome (yay), and I never use IE so I haven't bothered testing it out there.
With any given Google search, some or all of the resultant links will redirect to unwanted sites, including tazinga.com. This hijack is not reliably reproducible between searches (so searching for "Dragon Age" may yield 1 infected link, but which link this is changes from search to search), though it does appear somewhat reproducible within searches (so if an infected link is produced by searching for "Dragon Age", clicking that link multiple times without reloading the page will redirect to the same site). Initially, I noticed that infected links would display an incorrect link in Firefox Status Bar at the bottom of the page (so dragonage.wikia.com would display as something along the lines of google.com/?...[long string of characters]). This is no longer the case - all links show up in the Status Bar correctly, but may or may not be infected.

I have run the following programmes in an attempt to cleanse my computer:
- Malwarebytes' Anti-Malware
- SpyBot Search & Destroy
- SUPERAntiSpyware
Each have found a number of suspicious entries (mostly tracking cookies), but none have resolved the redirect issue.

I attempted to run DDS.scr (both in normal and Safe mode, with Avast! anti-script modules disabled), but in all cases my system froze after... Read more

A:Firefox Google search redirects

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

Read other 23 answers
RELEVANCY SCORE 78.8

Hey, I'm using an HP laptop with Vista Home edition. I use Mozilla Firefox with Google as my homepage (I use google for everything!). I bought this computer 1.5 years ago and have never ever ever had a problem with it. That is until yesterday.

All of a sudden, when I did google searches as usual and clicked on the links, half the time it would bring me to the appropriate website but then sometimes it would redirect to some unrelated nonsense webpage. Also, occasionally a website would just pop up by itself in a new browser. Obviously I know this means my computer is infected by/with something.

So I've spent the past 2 days trying to fix the problem by myself through reading various support forums and advice given to people with similar problems. Don't worry, I didn't try to run any specialized tools or complex applications that didn't make sense to me. I just downloaded, installed and ran some basic programs: Ad-Aware, Malwarebytes, and Glary Utilities. All 3 said that they found some problems and fixed them.

But obviously the fact that I'm posting this thread means that my problem has not gone away. So could somebody please help me. Thank you very much!



DDS (Ver_10-03-17.01) - NTFSx86
Run by Trevor at 23:27:30.42 on 06/07/2010
Internet Explorer: 8.0.6001.18928 BrowserJavaVersion: 1.6.0_20
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.2.1033.18.3002.1654 [GMT -7:00]

AV: TELUS security services Anti-Virus *On-access scanning disabled* (Updat... Read more

A:Firefox google search redirects

Welcome to TSF :)

Do you still need assistance?

Read other 12 answers
RELEVANCY SCORE 78.8

I'm not sure it's only in Firefox, and it happens at random intervals -- intermittent enough that you could be tempted to ignore it -- but my searches are being redirected to various sites like info[something], shoppers.com, bestonlinepromotions.com, etc...I run Avast! anti-virus which says I'm fine (awhile back it did find something and remove it, and I'm sorry I didn't save the log file). I have run Malwarebyte's Anti-malware scanner. It came up with two bad files and deleted them, yet the issue persists. I am sorry I also did not save the log file.My OS is Windows 7 64-bit Home Premium.I am following the instructions in this thread http://www.bleepingcomputer.com/forums/topic34773.html and posting here.I would appreciate any help in getting the machine ship shape again.I tried to run gmer but got the following error message: "C:Windows\system32\config\system: The system could not find the file specified." I am assuming this is because I am on a 64 bit OS. Therefore, there is no log for me to post per the instructions at this time.Here are the contents of my DDS.txt log:DDS (Ver_10-03-17.01) - NTFSX64 Run by Katana at 11:13:43.41 on Mon 09/06/2010Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_21Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.6135.3988 [GMT -4:00]============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.ex... Read more

A:Getting Google Search Redirects in Firefox

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

Read other 11 answers
RELEVANCY SCORE 78.8

Hello. My firefox/ie keeps redirecting on google search links. I've ran just about every scanner I know of. I have AVG running full time, i've ran search and destroy, malwarebyte's anti-malware, ad-aware, eset online. Nothing is found. I've deleted all java, and installed newest. I've tried several other things I can't even remember. This redirection started a few days ago. I am running Windows 7. Rootrepeal.exe gives off tons of errors, I can't run this program. dds.scr worked fine. Thanks.

A:Firefox/IE redirects on google search

Hi,My name is Extremeboy (or EB for short), and I will be helping you with your log.We apologize for the delay of response. If you still require assistance we would like to see the current condition of your system so please post a new set of DDS Logs as well as a RootRepeal log and a description of any remaining problems or symptoms you may still have please.If for any reason you did not post a DDS log or RootRepeal log please refer to this page and in step #6 and Step #7 for further instructions on downloading and running DDS & RootRepeal. If you have any problems when running the tools or unable to produce a report for any reason, just let me know in your next reply.For your next reply I would like to see:-The DDS logs---DDS.txt and Attach logs-RootRepeal logs-Description of any remaining problems you may still have.Thanks again and we apologize for the delay.With Regards,Extremeboy

Read other 3 answers
RELEVANCY SCORE 78.8

Sometimes when I do a search on Google with Firefox it redirects me to another website.

It first happened a number of months ago and I found that Malwarebytes couldn't find it. So I downloaded and installed Microsoft Security Essentials (MSE). I was then able to get rid of the virus with MSE.

A few weeks ago I then got a nasty virus that pretended to be MSE and told me it couldn't clean up the virus and that I should download some other AV. So I did that and realized it was just a virus.

So I had to download and run SUPERAntiSpyware. That dealt with the problem.

However now I'm still having problems with the Google/Firefox redirects. It doesn't happen all the time but to test it I searched for "payday loan" clicked on "www.badcreditgoodsolutions.co.uk/payday-loans.asp" and got sent to "paydaybank.co.uk"

As far as I can tell the problem doesn't happen when using Internet Explorer.

I have tried a number of times to run GMER however it freezes at some point before, during or after the scan so I can't post the results here.

Thanks in advance!
April

DDS (Ver_10-10-21.02) - NTFSx86
Run by April at 15:42:40.54 on 29/10/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.204 [GMT 1:00]

AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

============== Running Processes ... Read more

A:Google/Firefox Search Redirects

Hello AprilKWelcome to BleepingComputer ==========================Download OTL to your desktop.Double click on OTL to run it.Check the boxes beside LOP Check and Purity Check.Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply.====================Please download Rootkit Unhooker and save it to your desktop.Double-click RKUnhookerLE.exe to run it.Click the Report tab, then click ScanCheck Drivers, Stealth Code, Files, and Code HooksUncheck the rest, then click OKWhen prompted to Select Disks for Scan, make sure C:\ is checked and click OKWait till the scanner has finished then go File > Save ReportSave the report somewhere you can find it, typically your desktop. Click CloseCopy the entire contents of the report and paste it in your next reply.Note - You may get this warning it is ok, just ignore it."Rootkit Unhooker has detected a parasite inside itself!It is recommended to remove parasite, okay?"

Read other 15 answers
RELEVANCY SCORE 78

Hello,For the past week or so, I have been re-directed to various websites (mostly ads or what seems to be a fake newspaper) upon clicking links present in Google search results. From what I have gathered, my computer is infected with some sort of virus causing these redirects. The problem occurs in Firefox and IE.I have run Spybot, Malware anti-malware, TrendMicro's online scan and they have found problems and, seemingly, repaired those problems. However, I still have the re-direct issue. None of these seem to be fixed.I saw mention of someone running ComboFix on another forum. However, while beginning to run it, I saw the multiple warnings on this website about only running it after being instructed to do so. I aborted the running of that program and figured that it is time I ask for help from a more knowledgeable group of people.I have attached the DDS logs (DDS.txt and Attach.txt) that the preliminary help section said to provide. I tried to run the GMER program to provide that log with this post as well, however the scan continued for 3+ hours and, upon completion, the program stopped responding when I tried to save the log. I will attempt to run the scan again if instructed to do so.Below is a copy of a HijackThis scan that I ran earlier this evening **it seems that your website noticed I had an earlier version of HijackThis and I have no used the most recent version for a newer scan**.Thank-you for any help that can be provided. It would be greatly appreciated.Rega... Read more

A:Google search link redirects + pop-ups in Firefox

This issue has (hopefully) been completely resolved. You may close and lock this thread.Although I did not receive any help from the support group due to the quick turnaround, I would still like to thank all those involved for this website.The tutorials, as well as some of the guides and available information on this website has been a great help over the last few days.I hope that I don't need any help from this website or its users in the future, but I know there is a good source of knowledge if I do ever need it.

Read other 2 answers
RELEVANCY SCORE 78

I get redirected to Happili at random times when using Google search and Firefox.

I ran MS security essentials which detected 3 trojans: JS/Medfos.A, Win32/Medfos.B, Java/OpenStream.AR
These 3 trojans were removed, system rebooted but I continue to get random and sporadic redirects to "happili" when doing
a Google search.

Thank you for your help.
.
DDS (Ver_2011-08-26.01) - FAT32x86
Internet Explorer: 8.0.6001.18702
Run by paul anthony at 11:26:03 on 2012-04-18
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1982.1131 [GMT -4:00]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Microsoft Security Essentials *Enabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
SVCHOST.EXE
C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
SVCHOST.EXE
SVCHOST.EXE
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
SVCHOST.EXE
C:\Program Files\Cisco\Cisco NAC Agent\NACAgent.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Cisco\Cisco NAC Agent\NACAgentUI.exe
C:\WINDOWS\system32\wscntfy.exe
... Read more

A:"Happili" redirects with Google search using Firefox

Hello and Welcome to Bleeping Computer!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At t... Read more

Read other 26 answers
RELEVANCY SCORE 78

Here is my log file. When I click on a google (only google) search result using firefox (only firefox) browser I get a redirect to a spam site. It takes up to 5 clicks on the same link before I get properly redirected. Does not affect me when using IE.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:36:58 PM, on 4/27/2009Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16827)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\Program Files\Lavasoft\Ad-Aware\AAWService.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\WINDOWS\system32\inetsrv\inetinfo.exeC:\Program Files\Intel\Wireless\Bin\RegSrvc.exeC:\WINDOWS\system32\STacSV.exeC:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Intel\Wireless\Bin\WLKeeper.exeC:\WINDOWS\System... Read more

A:Possible Infection: Firefox Google Search Redirects

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explanation about the tool. No input is needed, the scan is running.Notepad will open with the results, click no to the Optional_Sca... Read more

Read other 2 answers
RELEVANCY SCORE 78

Hi, I am having a problem with Google search in Firefox. It seems that after performing a search and clicking on a link I get redirected to a unrelated site. I am assuming that I have some kind of hijacker or other malware. I ran a scan with MBAM and it only found 2 problems which it removed. Still having the same problem. I downloaded dds and it only opens as a text and is all just garbled.Any help is greatly appreciated!Thanks, DaveI ran a HJT and here is the log:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:38:08 AM, on 8/12/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\Program Files\Gibbs\RLMServer\rlm.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\PROGRA~1\McAfee\MSC\mcmscsvc.exeC:\Program Files\Gibbs\RLMServer\gibbsnet.exec:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exec:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.ex... Read more

A:Firefox google search redirects hijacked

Go HERE and download SysProt AntiRootkit. Unzip it to your DesktopRun SysProt >> Click on the Log tab Tick ALL the boxes at the "Write to log" section (Do NOT tick the "Hidden Objects Only" options)Hit the Create Log buttonWhen it asked for scanning option, choose Scanning all drives >> Hit Start button (Do NOT hit "Ok" button)Let it scan until finishFind the log.txt inside the SysProt folder and attach the log here.NEXTDownload this tool to desktop:http://www2.gmer.net/mbr/mbr.exeDouble click it & post the log it creates on desktop. (mbr.log)

Read other 20 answers
RELEVANCY SCORE 78

I have often used this site to help others remove some rogue program malware, butnow it seems that I have the problem and hopefully you guys can help me out. My googlesearch results are redirecting to some pretty scrupulous websites when they are clicked on while using firefox. I haven't tried IE since I really don't trust using it now with all this going on. DDS log is below and attach is well attached to this post, thanks for all you do.DDS (Ver_10-03-17.01) - NTFSx86 Run by daemian2k at 6:28:46.60 on Wed 10/06/2010Internet Explorer: 8.0.6001.18943 BrowserJavaVersion: 1.6.0_21Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3000.1989 [GMT -5:00]SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}============== Running Processes ===============C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k GPSvcGroupC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoo... Read more

A:Firefox redirects google search results

Hello and welcome to Bleeping Computer! We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open wit... Read more

Read other 28 answers
RELEVANCY SCORE 77.6

For the past 3 days, this computer has had several problems with getting on the internet. I was able to solve some of the problems preventing Firefox from being opened, but two issues still remain.1) While using Firefox, and I am unable to use anything related to google.comGoing to google.com returns a white page with "404 Not Found" in large text, and "nginx" in smaller text below that.2) I randomly get redirected to advertising websites while viewing some of my favored sites.For an example of 2:
Spoiler
Earlier I was viewing Blizzard's Blue posts at http://blue.mmo-champion.com/1st: Went to http://blue.mmo-champion.com/2nd: I click a topic of interest, went to http://blue.mmo-champion.com/topic/191513/negative-ghostrider-the-pattern-is-fullThis next part is where I get redirected3rd: I click one of the buttons, the Blizz button with the arrow, which normally is supposed to take me to the source or the post itself.I'm supposed to go here: http://us.battle.net/wow/en/forum/topic/3048064944?page=19#371But instead, this shows up in my browsing history:http://allglobesales.com/aff?aff=http%3A%2F%2Fbridge2.admarketplace.net%2Fct%3Fversion%3D7.0.0%26key%3D62256396176.3275365%26ci%3D1313772378950.10158&i=HctLDoQgDADQdW_RC0iQj5Xj1AIOyQgTMOH6mtm-5JFTwSnjVmU2ME6DVtpY8kCwARkbJW-aD-Gd6BBKa7C7DzH4KDaDBLiutsiHr19pFRecrX8jtoyTu3TON9Y0B3KN2LnEUk8cd-c7nSUNfPOfx_vmAw~~http://bridge2.admarketplace.net/ct?version=7.0.0&key=62256396176.3275365&ci=131377... Read more

A:404 nginx google/firefox - random redirects

Please download MiniToolBox, save it to your desktop and run it.Checkmark the following checkboxes:Flush DNSReport IE Proxy SettingsReset IE Proxy SettingsReport FF Proxy SettingsReset FF Proxy SettingsList content of HostsList IP configurationList last 10 Event Viewer logList Installed ProgramsList Users, Partitions and Memory size.List Minidump FilesClick Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

Read other 20 answers
RELEVANCY SCORE 77.6

Hello, recently i contracted a virus. It was the Bankerfox A and win nuqel.e virus where AV security suite keeps popping up and asking you to install it. I managed to get rid of that and get everything else working, however afterwords I have the problem of most google searches when I click on the links it redirects me to a random site. Also random ad tabs will pop up every now and then. One thing I noticed is that most of the redirects information symbol in the address bar looks like a 2. I have ran multiple searches with malwarebytes and microsoft security suite and they have come up with nothing.

A:Random Redirects on links from google search

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

Read other 1 answers
RELEVANCY SCORE 77.6

Dear Sirs,
Thanks very much in advance for the help. I think my computer is infected as everytime I do a search in Google, it redirects me to random sites.

Please let me know what I have to do solve this.

My DDS results are:



DDS (Ver_09-02-01.01) - NTFSx86
Run by Michael at 20:43:09.08 on 21/02/2009
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_03
Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.1023.530 [GMT 0:00]

AV: AVG 7.5.552 *On-access scanning enabled* (Updated)
AV: Norton AntiVirus *On-access scanning enabled* (Updated)
FW: Norton Internet Security *enabled*
FW: ZoneAlarm Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Alias\Maya7.0\docs\wrapper.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\Tablet.exe
C:\Program Files\Alias\Maya7.0\docs\jre\bin\java.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.e... Read more

A:Every google search I do redirects me to random sites. Help please.

Howdy there Michael and welcome to TSF Forums

I'm Steve and I will be helping you thoughout this fix.

Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. It is IMPORTANT that you don't miss a step. Please perform everything in the correct order/sequence.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription

Please note that the forum is very busy and if I don't hear from you within three days from this initial post then thread will be closed.

Please follow these directions in the order they are set out for you.

It appears that you have two antivirus programs installed and running, Norton AntiVirus and AVG 7.5. While I understand the frustrations of malware this may seem like a good idea to improve protection, but they can actually have the opposite effect and conflict with one another and cause system instability or even system hangs. Please choose one to keep and uninstall the other via Add or Remove Programs in your Control Panel.

We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix

* Ensure you have disabled all anti virus and anti ma... Read more

Read other 6 answers
RELEVANCY SCORE 77.6

;Hi all. I have been having a problem whereby any search links that I click on from Google directs me onto another random website. I have IE8, and installed IE9 hoping it would sort it, but hasn't. I've tried to see other post messages, but no luck.

Here's my HijackThis log;

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:35:36, on 14/01/2013
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.17115)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\AVG\AVG2013\avgui.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Users\Amit\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blan... Read more

A:Google Search redirects to random websites

Read other 16 answers
RELEVANCY SCORE 77.6

Hello.My friend gave me his computer to fix. Problems:1. Blocks a lot of websites (this one also) for access [page not found]2. When I click any link from search results in google, it redirects to some other websites with a lot of advertisements or some weird search engines.3. As of right now computer starts up only in safe mode or last known good configuration. (in normal mode it's just freezes and black screen shows up)4. I tried to download mbam-setup.exe several times from the infected machine: when I run it, it shows up in list of processes, but nothing happens. I downloaded the file from my clean computer and transferred it to infected one via flash card. It took forever to install mbam and when I checked "update" at the end, nothing happened. Computer is not booting in normal mode anymore.5. Windows Restore is not working. When I choose restore point, I click next, then in the next window I click next and nothing happens (both in safe and normal modes).here are my logs :*********************** hijackthis *************************Logfile of Trend Micro HijackThis v2.0.2Scan saved at 11:11:31 PM, on 12/16/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16762)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\... Read more

A:Google redirects to random ad and search websites

oh,
Kaspersky online scanner - page not found (see problem#1).
Nod32 v2.5 - version of signatures 3697 (20081217) - no infected files found.

Read other 3 answers
RELEVANCY SCORE 77.2

Whenever I use Mozilla Firefox and go onto www.google.com and search something every search result i click redirects me to some random site. Usually the sites have an ip address in front of it that the site it self or just a random site like shopica.com

I have used Windows Defender, and Ad-Aware but to no avail please help!!

A:Every Google Search Result Usually Redirects Me To 1-2 Spyware Sites

Welcome to BC oh no NOOOOOOOOO...What OS (Win 2K, XPsp1, XPsp2, Vista) are you using? What type of anti-virus are you using? Have you tried doing your scans in "Safe Mode"?You need to start there first. If rescanning in Safe Mode does not help, then do this:Please download ATF Cleaner by Atribune & save it to your desktop. DO NOT use yet. Please download and install SUPERAntiSpyware FreeDouble-click SUPERAntiSypware.exe and use the default settings for installation.An icon will be created on your desktop. Double-click that icon to launch the program.If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here and unzip into the program's folder.)Under the "Configuration and Preferences", click the Preferences... button.Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):Close browsers before scanning.Scan for tracking cookies.Terminate memory threats before quarantining.Click the "Close" button to leave the control center screen and exit the program.Do not run a scan just yet.Reboot your computer in "Safe Mod... Read more

Read other 1 answers
RELEVANCY SCORE 77.2

My firefox redirect to infomash and other things i didnt search or when i google search i have done several Mal ware Bytes scans to no avail.. any help would be appreciated.Highjackthis logLogfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:49:26 AM, on 7/22/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\Comodo\COMODO Internet Security\cfp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\dvd43\DVD43_Tray.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\TrueCrypt\TrueCrypt.exe
C:\Pro... Read more

A:Firefox redirects to infomash.com and others on google search link

Anybody out there?

Read other 3 answers
RELEVANCY SCORE 77.2

I noticed some other people have posted the same problem and I can't figure out if it's been resolved so I decided to post for help directly. I read another post asking to follow steps 6-9 of the prep guide which I have done and included the results.

Basically, unless I type in a complete url or click on a bookmark, my Google search results are automatically redirected to either 404 Not Found nginx, or yahoo, or a number of other wacky sites. I am also unable to download any a/v security software (tried McAfee), or install any a/v secutiry software (tried ESET, AVG). The error says I do not have sufficient access to a particular file and must contact my system admin- which in my case is me. I can run the installer again to grab the file name if needed. I had ESET installed before this started happening and it was always coming up clean, and then I uninstalled it to re-install and it hasn't worked since, which would be within the last week.

Windows update is also dysfunctional; it gives me an error saying it cannot check for updates. I think that's the gist of it, happy to answer any questions and very, very grateful for any help.

BTW, I removed all the add-ons from Firefox and it was still happening. I finally ended up uninstalling it and using Chrome which is doing the same thing.

Thanks
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_26
Run by Advantage Media at 22:53:34 on 2011-08-07
Microsoft? Window... Read more

A:Firefox/Chrome Redirects Google Search Results

Also cannot turn on windows defender anymore. Firewall is functional.

Thank you

Read other 3 answers
RELEVANCY SCORE 77.2

Don't know what kind of virus, but bound to be one.
Using:
Windows 8.1
Firefox 
Google homepage and search
Problem: Google search redirects to Yahoo. When it first occurred, the search section disppeared from the address bar, so forced to enter data in the address section. When clicked on, then went to Yahoo.
When searching internet for answers, none seemed to work for Windows 8.1.
I ran Malwarebytes, reinstalled Firefox, refreshed Firefox, cleaned cache.
The search section returned, but still redirects to Yahoo.
This could have started when I installed AdBlock Plus, which was about the same time the problem first occurred.
I deleted this add-on. Also deleted Adobe Flash Player, which I had been directed to update.
Also, strange, to me at least, there seems to be no Yahoo stuff to delete, nothing in Control Panel or program files.
 
Any help? I am not a complete ignoramus, but if advice is not step by step I probably won't be able to understand advanced computer jargon.
 
Heap thanks. And more effusive ones to follow if I get this fixed.
P.

A:Google search redirects to yahoo, using Firefox, Windows 8.1

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the LogFile button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Check off the element(s) you wish to keep.Click on the Clean button follow the prompts.A log file will automatically open after the scan has finished.Please post the content of that log file with your next answer.You can find the log file at C:\AdwCleanerCx.txt (x is a number).===Download the version of this tool for your operating system.Farbar Recovery Scan Tool (64 bit)Farbar Recovery Scan Tool (32 bit)and save it to a folder on your computer's Desktop.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first ti... Read more

Read other 14 answers
RELEVANCY SCORE 76.8

Hey, i tried using a windows vista recovery disc, but that does me no good, i get google redirects almost 90% of the time i click a link, and when i want to shut down my computer, i cant because it just shows a blue screen warning, then restarts. My computer is also very slow now, any help?
 

A:I get google redirects, random firefox tab ads and blue screens

Read other 16 answers
RELEVANCY SCORE 76.8

Hi,Please do the following:Download ComboFix from one of the following locations:Link 1 Link 2 VERY IMPORTANT !!! Save ComboFix.exe to your Desktop * IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here Double click on ComboFix.exe & follow the prompts.As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:Click on Yes, to continue scanning for malware.When finished, it shall produce a log for you. Please include the C:\C... Read more

A:Google Search Redirects/Other Random Internet Issues

Due to the lack of feedback, this topic is now closed.In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.

Read other 16 answers
RELEVANCY SCORE 76.8

Hi everyone, every time I use google or yahoo to search for something, all the results redirect me to another search engine. This probably just started happening a couple days ago and I hope it's not too late to fix it.

But before this started happening my SuperAntiSpyWare program kept crashing at start up so I uninstalled that. Then I tried running MBAM, but after double clicking it, nothing happens. So I uninstalled MBAM and re-downloaded it. I tried running the install but nothing happened.

One last thing, every time I tried to go to this website it would say 'Failed to connect'. But clearly it's not the website.

I hope this isn't too many errors at once, I just thought they all might be related to one kind of problem.

This is starting to get really annoying so any help would be great.

Thanks.

A:Google link redirects me to some random search engine.

Try renaming the Malwarebytes setup file, mbam-setup.exe, to something else such as abcde.bat and then try installing it.

Read other 5 answers
RELEVANCY SCORE 76.8

Hi there,

Details, the other day this started happening, when I search for something on in google, one of the results I click on redirects me to a random page that was not my intended search.
This happened in ff4 so I have uninstalled that and installed google chrome, but it still happens, although not chrome tells me the redirected page is bad.
I have scanned with Ad aware, found nothing, Malware bites, had numerous results and removed them, and spybot has also found stuff and removed them.

I currently had Ad aware running, malware bytes that I scan every now and then and I have spybot installed, but I may/will uninstall.
I know that is several unnecessary virus programs, but only one does live protection(Ad aware) so I assume its ok and I turn off Ad aware when I use others to scan.
Back to topic:



.
DDS (Ver_2011-06-03.01) - NTFSx86
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_18
Run by Ruby at 21:13:18 on 2011-06-07
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.358 [GMT 1:00]
.
AV: Lavasoft Ad-Watch Live! Anti-Virus *Disabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\... Read more

A:Google search result redirects, to random page.

Hello and welcome. Please follow these guidelines while we work on your PC:Malware removal is a sometimes lengthy and tedious process. Please stick with the thread until I’ve given you the “All clear.” Absence of symptoms does not mean your machine is clean!
Please do not run any scans or install/uninstall any applications without being directed to do so.
Please note that the forum is very busy and if I don't hear from you within five days this thread will be closed.
Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this linkDouble click on ComboFix.exe & follow the prompts.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a ... Read more

Read other 12 answers
RELEVANCY SCORE 76.8

Now I am very able to clean my computer using multiple tools and is very rare I need someone else's help, however in this case I am baffled. It seems to happen only in FireFox, when I search on Google and click a result it redirects to various webpages. One of the most popular being 'b00kmarks.com', which shows search topics not even related to my original search.

I have check my HiJackThis and cannot find anything out of the ordinary. Malwarebytes also could not find anything also. This redirect is getting very annoying and any help given would be great. Just let me know what you need. Thanks.

A:Google redirects to random unrelated search pages

Since you have an HJT log, you may want to post that at BC Virus, Trojan, Spyware, and Malware Removal Logs - http://www.bleepingcomputer.com/forums/forum22.html .

In the meantime, I will move this topic to our Am I Infected forum.

Louis

Read other 2 answers
RELEVANCY SCORE 76.8

I am having a problem with Google searches. The search results bring up the right pages ie ( if I search "bleepingcomputer" www.bleepingcomputer.com is the first result). The problem is that when I click on the result, I get redirected to random pages. Sometimes it will take me to another search page or to crackle.com ect.. If I click on the cached link in the results it will bring me to the right page. Also I am not sure if this is related but on occasion I will get a balloon pop up in the system tray that says something along the lines of system error. When I click on it a window opens and it runs an online virus scan. Here is the log file:DDS (Version 1.1.0) - NTFSx86 Run by Christopher at 20:45:38.06 on Mon 01/05/2009Internet Explorer: 7.0.5730.13Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.503.117 [GMT -5:00]AV: AVG 7.5.552 *On-access scanning enabled* (Updated)============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\Program Files\Intel\Wireless\Bin\S24EvMon.exesvchost.exesvchost.exeC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exeC:\PROGRA~1\Grisoft\AVG7\avgamsvr.exeC:\PROGRA~1�... Read more

A:Google search results redirects to random pages

Welcome to the BleepingComputer Forums. Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. If you have not already downloaded Random's System Information Tool (RSIT), please download Random's System Information Tool (RSIT) by random/random which includes a HijackThis log and save it to your desktop. If you have RSIT already on your computer, please run it again. Double click on RSIT.exe to run RSIT. Click Continue at the disclaimer screen. Please post the contents of log.txt. Thank you for your patience.Please see Preparation Guide for use before posting about your potential Malware problem. If you have already posted this log at another forum or if you decide to seek help at another forum, please let us know. There is a shortage of helpers and taking the time of two volunteer helpers means that someone else may not be helped. While we are working on your HijackThis log, please: Reply to this thread; do not start another! Do not make any changes on your computer during the cleaning process or download/add programs on your computer unless instructed to do so. Do not run any other tool until instructed to do so! Let me know if any of the links do not work or if any of the tools do not work. Tell me about problems or symptoms that occur during the fix. Do not run any other programs or open any other windows while doing a fix. Ask any questions that you have regarding the fix(es... Read more

Read other 2 answers
RELEVANCY SCORE 76.8

Pasting in additional information from another post. ~ OBMy Google search result links sometimes redirect to completely random pages. I ran Malwarebytes and Combofix- but Rootkit.Agent keeps coming back.End of added information. ~ OBMy Google search result links sometimes redirects to completely random pages. I ran Malwarebytes and other Anti Spyware programs.DDS (Ver_10-03-17.01) - NTFSx86 Run by 8400 at 19:22:05.10 on Thu 05/13/2010Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.5.0_12Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1022.522 [GMT -4:00]============== Running Processes ===============C:\WINDOWS\system32\Ati2evxx.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\ctfmon.exesvchost.exeC:\WINDOWS\System32\CTsvcCDA.EXEC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Linksys\Linksys Updater\bin\LinksysUpdater.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\system32\java.exeC:\WINDOWS\System32\svchost.exe -k imgsvcC:\WINDOWS\System32\MsPMSPSv.exeC:\WINDOWS\System32\svchost.exe -k HTTPFilterC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPNRA.EXEC:&#... Read more

A:Google search redirects to completely random pages

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEmsconfigsafebootminimalactivexdrivers32netsvcs%SYSTEMDRIVE%\*.exe/md5st... Read more

Read other 67 answers
RELEVANCY SCORE 76.4

Occurs: Search Engine Redirects (Yahoo/Google/etc. on IE/Firefox/Chrome)
Whenever I click on a link after using a search engine it redirects to spam/useless pages. I've tried numerous spyware removal programs with no success (include malwarebytes, spybot....) Any assistance is greatly appreciated. Thanks for your time. The following is my DDS log followed by the 2 requested attachments.



DDS (Ver_10-03-17.01) - NTFSx86
Run by MERAJUL ALAM at 11:22:39.29 on Thu 07/29/2010
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2039.1178 [GMT -4:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\servicing\TrustedInstaller.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG9\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Windows\system32\sppsvc.exe
C:\Windows\s... Read more

A:Search Engine Redirects (Yahoo/Google/etc. on IE/Firefox/Chrome)

Welcome to TSF :)

Scan with RKUnHookerPlease download Rootkit Unhooker Save it to your desktop.
Now double-click on RKUnhookerLE.exe to run it.
Click the Report tab, then click Scan.
Check (Tick) Drivers, Stealth. Uncheck the rest, then Click Ok.
Wait till the scanner has finished then click File, Save Report.
Save the report to your Desktop. Click Close.

In your next reply, copy and paste the contents of the log.

Note*** you may get this warning it is ok, just ignore

"Rootkit Unhooker has detected a parasite inside itself!!
It is recommended to remove parasite, okay?"

Read other 9 answers
RELEVANCY SCORE 76.4

Hello,I am working on a Woindows XP machine that iss deeply infected with trojans and other malware. Every link clicked in Google or other search engines gets redirected to a totally random website.Also,Whenever I try to go into gmail:It says: certificatre was signed by unsigned authority andwhen i click showcertificate:Issued to:localhost.localdomainIssued by:localhost.localdomainand I can never get into gmail.I ran Hijack This and the log is as follows:Can someone plz help me:Logfile of Trend Micro HijackThis v2.0.2Scan saved at 9:14:53 PM, on 12/10/2009Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Intel\Wireless\Bin\EvtEng.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Intel\Wireless\Bin\S24EvMon.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\e... Read more

A:InternetHijack:IE,Firefox,Safari redirects from google search results

Hi,My name is Syler and I will be helping you to solve your Malware issues. If you have since resolved your issues I would appreciate if youwould let me no so I can close this topic, if you still need help please let me no what issues you are still having, in your next reply.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.Push the button.Two reports will open, copy and paste them in a reply here:OTL.txt <-- Will be openedExtra.txt <-- Will be minimizedThen please post back here with the following logs: OTL.txt Extra.txtThanks

Read other 2 answers
RELEVANCY SCORE 76.4

Hi,

A brief history of my problem:

Just this week I noticed that when I clicked on a search item from google in firefox I would get redirected to this website:

http://69.50.189.186/c.php?c=283294bfcd829673cf10e08611a6a084&mk=MC41NzU1&id=1&zp={CAD9A8F7-B26E-4DD9-9A9A-F4CE85520C4D}&alg=0

At first I thought it was a firefox problem so I uninstalled firefox and re-installed it. The problem went away, but only for the duration of my computer session. It came back the next day after I restarted my computer. I've run various spyware removers (ad-adware, spybot, spyware doctor and super antispyware). The only one that found a DNSChanger or soemthing similar (sorry I forgot the exact name) was spyware doctor. I thought I had fixed the problem but it persisted. Repeat scanning with all of the above returned clean result other than some tracking cookies.

I am across a thread on this forum with something similar so I went ahead and tried to do the same.

I ran super antispyware in safe mode and this is the log. It looks clean but I still have the problem. I am at a complete loss. Any help will be much appreciated!

-----------------------------------------------------------------------------------------------------
SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/30/2008 at 03:35 AM

Application Version : 4.0.1154

Core Rules Database Version : 3427
Trace Rules Database Version: 1419

Scan type : Complete Scan
Total Scan Time : 00:15:59

M... Read more

Read other answers
RELEVANCY SCORE 76.4

HelloI am suffering from the same problem as several other people on the forums, so apologies if the answer to my question is already available elsewhere. When using Google in Firefox 3.6.3 the search results are returned as expected, but when I click a link I am not taken where I want to go: instead I end up at a site that looks like Ask Jeeves (I'm not sure if it is the official one, probably not) or a news site. If I type the URL into the address bar I can get straight there. Occasionally Firefox will also open random tabs to those sites even though I have not performed a search. I am not having a problem with pop-ups.I have read through the fixes for others and I have run a complete AVG scan and used their Anti-Rootkit scan. I cleared the cache and deleted all cookies and temp files. The scans came up with nothing. I have also run Malware Bytes Anti-Malware scan which identified 6 files. I followed the instructions to delete them and rebooted my PC normally. I have pasted the log below. After rebooting my PC I did a new search in Google and I was still redirected to the Ask Jeeves-type page so this hasn't worked.I read through the Preparation Guide for Use before Requesting Help and unfortunately I got stuck at point 6: I don't know if I have CD Emulation software. I would appreciate any help you can offer - from what I can tell from other people with the same problem this is just going to get worse so I would really like to crack it as soon as I ca... Read more

A:Browser redirects to other search or news sites (Firefox/Google)

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Foll... Read more

Read other 11 answers
RELEVANCY SCORE 76

Hi,When I click on links from Google search results, it takes me to random web pages. In the back button history, I noticed there is a Redirect page and a Jump page.Have tried various things that have been mentioned here after doing a search for Jump and Redirect but it has nothing (so far) has successfully fixed the problem. So I decided to follow your instructions and post a request for help.So, thanks in advance for any help you can offer. Here are the outputs from dss.exe and Kaspersky.RegardsNesanHere is main.txt output from dss.exe:Deckard's System Scanner v20071014.68Run by Nesan on 2008-08-01 20:14:38Computer is in Normal Mode.---------------------------------------------------------------------------------- System Restore --------------------------------------------------------------Successfully created a Deckard's System Scanner Restore Point.-- Last 5 Restore Point(s) --6: 2008-08-02 00:14:46 UTC - RP367 - Deckard's System Scanner Restore Point5: 2008-08-01 20:41:57 UTC - RP366 - Installed SUPERAntiSpyware Free Edition4: 2008-07-31 23:30:44 UTC - RP365 - System Checkpoint3: 2008-07-29 20:03:15 UTC - RP364 - System Checkpoint2: 2008-07-28 19:14:47 UTC - RP363 - 080728-- First Restore Point -- 1: 2008-07-28 15:36:02 UTC - RP362 - Last good restore pointBacked up registry hives.Performed disk cleanup.-- HijackThis (run as Nesan.exe) -----------------------------------------------Logfile of Trend Micro HijackThis v2.0.2Scan saved at 8:16:56 PM, on 8/1/2008Platform: ... Read more

A:Ie Jumps/redirects To Random Pages From Google Search Results

Bump.

Read other 16 answers
RELEVANCY SCORE 75.6

I am writing to request for help with some spyware/malware on our computer running Windows XP SP3.

Some of the major symptoms are:

1. Whenever Internet Explorer is opened, it immediately crashes with an error signature such as:
Appname: iexplore.exe Appver:7.0.6000.16705 ModName: entapi.dll
Mod/ver: 8.0.0.240 offset:0000368

2. Whenever we use Firefox do a google search the result link is redirected to another website. For example, the top result of the search for hijack this is redirected to
http://go.google.com/?u=Qu3CZzPQvSI...GkDysKI_TRAAjoSuckloNe=s?php.c/711.691.111.46

I have run adaware, spybot, avg anti-virus and ccleaner on the computer and although these tools have removed a lot of ad cookies and some bad registry entries such as
‘HKEY_users\S-1-5-21-927213679-3701-77400-4173190044-1006\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges’; the core problem remains.

After reading the posts on this list, I believe the best option is for the experts to review the hijackthis logs, so I have run the utility and attached the logs with this email.

Any help you can provide is much appreciated.

Thanks much.
 

A:Solved: IE Crashes, Firefox google search redirects - Hijackthis log attached

Ok, I read some more posts on this list and gathered that one of the recommended actions was to run Malwarebytes Anti-Malware, which I did. To my pleasant surprise, the software did catch and clean a lot of threats. Attached is the log file before cleaning.

Now IE does start without crashing, but as soon as it opens it is redirected to some spam website. This is despite the fact that the home page is set to google. So that tells me that the malware is still residing on my system somewhere.

I re-ran hijack this after running ‘Malwarebytes Anti-Malware’ and have attached the latest logs.

Looking for some expert guidance ... help is appreciated.

Thanks
 

Read other 2 answers
RELEVANCY SCORE 75.6

Hi guys, I got a run of the mill search hijack when I do a google search that Im lookin' for help with.

Heres the specs: when i put in addresses directly, no redirect happens. Only happens when i google search. and if i right click and select "copy link location" and paste it in the address bar, it works fine and goes to the right spot. But when i google search and then click on any of the results, it redirects me to various different pages. usually its to the "search" sites that claim to be (whatever-term-i-searched-for.com) and full of nothing but fake links , etc. some popups too, but not a whole lot, firefox stll blocks some of them. For the record, theres not a particular search engine or ad page that comes up repeatedly as far as I notice. In the past it kept going to "tazinga", but not lately.

Anyways, I ran Malwarebytes and nothing came up the last time I used this computer. Im on a dell netbook and I had stopped using it for a few months. when i began using it again today, I realized that I still had this redirect problem from last time, so Im running malwarebytes again, but Im guessing it may not find anything this time either, so far, nothing and its been going for over 2 hrs. Im not really noticing any particular things that stand out with the redirects, its a very generic kind of thing no specific sites or ads that keep popping up, etc.

Ill be happy to post any other information you need from me. i keep trying to attach my gm... Read more

A:Browser (firefox) constantly redirects when I click on google search results

Hello and welcome to the forums!My secret agent name on the forums is SweetTech (you can call me ST for short), it's a pleasure to meet you. I am very sorry for the delay in responding, but as you can see we are at the moment being flooded with logs which, when paired with the never-ending shortage of helpers, resulted in the delayed responding to your thread.I would be glad to take a look at your log and help you with solving any malware problems.If you have since resolved the issues you were originally experiencing, or have received help elsewhere, please inform me so that this topic can be closed. If you have not, please adhere to the guidelines below and then follow instructions as outlined further below:Logs from malware removal programs (OTL is one of them) can take some time to analyze. I need you to be patient while I analyze any logs you post. Please remember, I am a volunteer, and I do have a life outside of these forums.
Please make sure to carefully read any instruction that I give you. Attention to detail is important! Since I cannot see or directly interact with your computer I am dependent on you to "be my eyes" and provide as much information as you can regarding the current state of your computer.
If you're not sure, or if something unexpected happens, do NOT continue! Stop and ask!
In Windows Vista and Windows 7, all tools need to be started by right clicking and selecting Run as Administrator!
Do not d... Read more

Read other 2 answers